Hi, On Mon, 30 May 2005 21:52:47 +0800 (CST) Gary Saptaputra <.> wrote:
Hi,
Is there a tools that can check whether your suse box got hacked or not? It's suse enterprise 9.
Check out the rkhunter tool [ http://www.rootkit.nl/ ]; being kindly provided also in rpm form by Patrick Shanahan (see recent list archi- ves): http://wahoo.no-ip.org/~pat/rkhunter-1.2.7-1.noarch.rpm http://wahoo.no-ip.org/~pat/rkhunter-1.2.7-1.src.rpm http://wahoo.no-ip.org/~pat/rkhunter-1.2.7.tar.gz You could try chkrootkit in addition, by downloading it directly from it's original site [ http://www.chkrootkit.org/ ] or simply rebuild the source rpm of 9.3: ftp://gd.tuwien.ac.at/opsys/linux/suse.com/suse/i386/9.3/suse/src/chkrootkit-0.44-3.src.rpm Hope, that your box is not corrupted and you just have e.g. few outdated entries in /etc/hosts. All the best, Pelibali